Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/IK0Og0J7RVepzu_5cGLev2ucI-U.roa
File: IK0Og0J7RVepzu_5cGLev2ucI-U.roa (raw, json)
Hash identifier: PCXfC7liCXcujQraBvUggu0Im8U1BiEHLuik2xWLd5o=
Subject key identifier: 20:AD:0E:83:42:7B:45:57:A9:CE:EF:F9:70:62:DE:BF:6B:9C:23:E5
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 019D7279D9AC99AB640E15D3CFDBA557D3F4
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/IK0Og0J7RVepzu_5cGLev2ucI-U.roa
Signing time: Thu 09 Apr 2026 13:41:21 +0000
ROA not before: Thu 09 Apr 2026 13:41:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199293
IP address blocks: 95.47.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:79:d9:ac:99:ab:64:0e:15:d3:cf:db:a5:57:d3:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Apr 9 13:41:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=20ad0e83427b4557a9ceeff97062debf6b9c23e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:12:43:86:08:16:3b:d8:bc:1d:7d:4b:d8:71:
0a:eb:19:a4:b5:ba:3a:73:04:15:ed:a3:96:79:c6:
94:90:12:a8:8c:ea:4b:e5:1c:d6:f1:6b:40:3f:0b:
2c:37:e5:12:2d:93:2a:35:c7:92:a2:7d:90:a9:01:
b5:59:a9:b8:1b:78:0f:9a:fa:f0:4e:49:b9:16:78:
27:9d:9f:5b:f6:ad:37:ec:cc:1d:fe:9e:f6:35:3a:
6e:ce:50:ad:c2:53:72:67:57:3a:b0:23:86:7f:77:
5c:cc:9e:02:39:f9:a3:e5:52:6d:f4:c2:e9:a5:74:
de:4a:c3:5d:5d:14:43:ec:89:79:c6:6c:99:3a:3d:
a3:a6:80:f2:a4:3a:7d:ef:bf:ec:c2:3a:9d:ce:38:
76:15:0f:8e:5a:aa:04:9c:39:d8:14:48:49:c4:18:
80:55:de:92:30:79:96:e7:1a:e4:7e:f5:bd:bb:07:
5e:a3:93:b8:08:48:da:b0:18:1a:66:60:e4:70:8c:
4e:cc:19:d6:12:c6:8c:d3:39:da:0c:30:2b:d9:18:
57:84:59:21:d2:d3:9b:cf:f3:92:30:0b:b0:4e:7c:
34:45:de:13:61:9e:34:10:32:54:ef:e6:7d:24:8a:
ed:ce:81:8c:e0:f0:72:cb:6d:e4:ad:c6:41:15:0a:
31:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:AD:0E:83:42:7B:45:57:A9:CE:EF:F9:70:62:DE:BF:6B:9C:23:E5
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/IK0Og0J7RVepzu_5cGLev2ucI-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.48.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:c3:72:0f:a1:37:35:21:05:8f:30:5c:e6:fe:59:ba:6a:ce:
fa:fb:b2:de:87:60:28:64:38:c6:e7:b9:3c:82:f6:61:65:27:
1f:e5:9d:8b:6a:0c:b5:3d:c6:15:df:aa:33:33:96:47:63:df:
d0:6f:27:59:6c:b0:01:3f:52:20:8f:30:07:0a:40:80:5d:19:
93:b4:79:6b:8f:7d:10:04:cf:34:28:21:b2:22:17:d4:d3:04:
e6:f4:7e:ed:95:a2:68:86:99:b4:da:01:5e:14:79:0f:b9:f5:
0f:6f:24:9d:1a:fe:7d:ca:e6:d5:95:01:c7:ca:35:5a:8b:4f:
e8:2d:6f:8c:08:15:c5:31:0b:8a:ea:47:85:03:d0:c5:31:8e:
bb:10:a6:9d:f6:52:af:c7:1e:73:0e:bf:53:0a:a1:1c:e7:42:
df:92:08:2b:3b:87:fb:5c:21:31:85:c4:0d:cb:23:29:ad:4a:
c6:f8:e5:b7:b3:63:19:48:0f:cf:0f:5e:c2:a1:48:e2:5f:32:
13:05:64:44:ca:d4:1b:81:5c:a3:a3:7b:4e:c9:34:59:79:d0:
4c:8e:e7:3b:a1:e5:0d:4e:60:2e:b2:75:9f:9c:7e:fd:82:5b:
97:94:85:77:c9:71:54:be:ac:f4:bc:e1:45:c3:c0:97:f4:a5:
d0:4d:1e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:19:37 2026 by rpki-client